(Environment: Ubuntu 16.04 LTS installed on VPS such as Linode)

Install and run Shadowsocks on server

I put the following process into a shell script. Check this “one-click” method: giraffe

Install Shadowsocks

Update packages:

sudo apt-get update && apt-get upgrade

Install pip and m2crypto:

sudo apt-get install python-pip



sudo apt-get install python-m2crypto

Install shadowsocks:

pip install setuptools



pip install shadowsocks

If locale error happens:

Configue Shadowsocks

Create a config file /etc/shadowsocks.json as:

For single user:

{



"server": "my_server_ip",



"server_port": 8388,



"local_address": "127.0.0.1",



"local_port": 1080,



"password": "mypassword",



"timeout": 300,



"method": "aes-256-cfb",



"fast_open": false



}

For multiple users:

{



"server": "0.0.0.0",



"port_password": {



"8381": "ps1",



"8382": "ps2",



"8383": "ps3",



"8384": "ps4"



},



"timeout": 300,



"method": "aes-256-cfb"



}

Start Shadowsocks server

Run shadowsocks server as daemon:

ssserver -c /etc/shadowsocks.json -d start

Stop SS server:

ssserver -c /etc/shadowsocks.json -d stop

Restart:

ssserver -c /etc/shadowsocks.json -d restart

Auto start after system reboot

You can start SS server manually with the above command every time the system powers on, or find a way to let it auto started.

There is a method: add the above start command in /etc/rc.local before exit 0 line. However it does not work for me and I don’t know why.

Supervisor can do this job.

Install supervisor:

sudo apt-get install supervisor

Create a supervisor config file /etc/supervisor/conf.d/shadowsocks.conf with contents:

[program:shadowsocks]



command=ssserver -c /etc/shadowsocks.json -d start



autostart=true



autorestart=true



user=root



log_stderr=true



logfile=/var/log/shadowsocks.log

Then start (or restart) supervisor:

sudo service supervisor start

And the server part is done.

Update kernel and install BBR acceleration (for kernel version < 4.9)

ref: 一键安装最新内核并开启 BBR 脚本

Check kernal version

wget --no-check-certificate https://github.com/teddysun/across/raw/master/bbr.sh



chmod +x bbr.sh



./bbr.sh

Mac client

Download: ShadowsocksX

Automatically update pac file

(Problem: ShadowsocksX client update pac file from GFWList failed.)

Download a shell script from here and name it update_gfwlist.sh.

chmod +x update_gfwlist.sh



mv update_gfwlist.sh /usr/local/bin

Then you can manually run update_gfwlist.sh, or schedule a daily job:

export EDITOR=nano



crontab -e

and add a line:

# Update GFWList PAC file for ShadowsocksX at 10:30 everyday



30 10 * * * sh /usr/local/bin/update_gfwlist.sh

This will automatically update the file ~/.ShadowsocksX/gfwlist.js everyday at 10:30 am.

iTerm

Using Shadowsocks with Command Line Tools

iOS client

Wingy

Thanks to NEKit, there’s perfect way for iOS user.

> Wingy - Http(s),Socks5 Proxy Utility 作者是 SMART LIMITED

>

> App Store: Wingy

(This approach is not recommended now)

For iOS, the following method is OK for home use if you have an idle or long-time working Mac.

Step 1: make Mac a http proxy with privoxy

Edit config file: /usr/local/etc/privoxy/config:

• line “forward-socks5t / …” -> “forward-socks5t / 127.0.0.1:1080”

• line “listen-address 127.0.0.1:8118” -> “listen-address 0.0.0.0:6666” (6666 is a custom unused port)

Start privoxy:

/usr/local/sbin/privoxy --no-daemon /usr/local/etc/privoxy/config &

Step 2: make Mac a pac server

Make a folder to be served by nginx and copy the pac file into it:

mkdir /usr/local/share/pac



cp ~/.ShadowsocksX/gfwlist.js /usr/local/share/pac/proxy.pac

Edit proxy.pac, change the line “var proxy = …” to:

var proxy = "PROXY [IP_of_Mac]:6666; DIRECT;";

Note that 6666 is the port you configured for privoxy.

Then add a nginx configuration file in /usr/local/etc/nginx/servers:

server {



listen       8000;



location / {



root   /usr/local/share/pac;



index  index.html index.htm;



}



}

Start nginx:

brew services start nginx

On iPhone, in WiFi’s http proxy auto mode, add:

http://[IP_of_Mac]:8000/proxy.pac

We can also fix the IP of Mac by configuring the router.

Install and running IPsec VPN server

IPsec VPN 服务器一键安装脚本